Connection Limitation with same AD credential on ISE

Hi All,
I want that if A client has a successful connection - started session to company network with his/her domain account,he/she must not connect to network with same domain account from another device at same time.
I try to prevent connection more than one same time successful sessions with same domain credential from different devices.
thanks,

Are you looking to restrict access to only corporate assets and not allowing the same credentials authenticate against another device i.e. a smartphone? If so they you may want to consider the use of eap-tls where the certificate is issued to the workstation that the user is connecting from.
There isnt a feature that limits maximum simultaneous logins for internal users, that feature is only available on the guest side of ISE. I would recommend contacting cisco tac or your local rep to see if there is a feature that allows you to restrict the maximum logins that a corporate user can have on the network. This feature was available in ACS 4.2.
Thanks,

Similar Messages

  • Forms10gr2 taking 2 min to connect database with same server

    Hi ,
    i have installed oracle11gr2 & forms10gR2 on same server . But when i am connecting forms to database it is taking 2 Min to connect .
    on server i have two Lan card .
    how to minimize time to connect to database .
    Thanks
    Ravi

    Hi
    have you installed a normal Oracle Client also on your Host? normal Oracle Client
    Did you connect with host:port:sid or with a Oracle Naming Service? through TNS Service
    Can you test tnsping <alias> yes, It is working fine
    Did other user have the same problem? yes
    Did you connect through WAN or LAN connection? LAN (Intranet)
    Can you tell more about you client/database setup?
    Database setup:
    OS: Window 2008 server
    version: 11.1.0
    Client: 11.1.0
    OS: Window 2008 server
    Now I am not able to execute single select query which table contains 6 records and 15 columns it is taking long time I have waited 30 min still no resutls
    only one table is behaving like this remaining is working fine
    Edited by: user9235224 on Oct 6, 2012 7:06 PM

  • IPad 3 iOS 8 iTunes Connectivity Issue with same PC

    Hi all,
    Thank you for reading my post.
    I have an issue with my iPad3 and iTunes. Basically, I had synced my iPad and my PC (Lenovo Thinkpad T400) a long time ago. I then formatted my laptop to keep it going and all. Now, I want to transfer an iMovie (~450 mb) by syncing but, I get an error saying that I must erase the iPad and then sync because I have a "different iTunes library" I don't know what's the point, but this is the exact same laptop running the exact same OS (MS Windows 7 Pro) and authorized (Trust this computer on iPad) but it still won't let me do this. I have a lot of pictures, videos and important emails on this iPad and under any circumstances, do not want to erase it. The iPad is 32GB and has 5gigs of free space. It doesn't connect to my Mac either.
    Please let me know if you can help at the earliest, ( gotta go places)
    Thanks a lot!!
    Matt

    Your post is quite confusing, for several reasons.
    First of all, you're talking about a Lenovo PC, but you have posted in the "iTunes for Mac" forum.  Your profile indicates you have a MacBook Pro, but it's not at all clear if that enters into your scenario.
    Secondly, it sounds like perhaps you're trying to use an iPad to do the "transfer an iMovie".  If so, that is the source of your issue.  The iPad cannot serve as a storage device to transfer iTunes data from one PC to another.  You must use your computer's backup to do that.  If you reformatted your laptop's disk, then it likely looks like a new computer to iTunes.  You must restore the old backup to move the iTunes data to the newly formatted disk.

  • I have the new ipad retina however i connect it to the wifi at work the signal comes and goes, especially as soon as i use an app that requires wifi, my iphone 4s is connected to the same network with no such problems, why is my ipad giving me these probl

    I have had my ipad retina for two and a half weeks but since the week end every time i connect to the wifi network it joins then disapears as soon as i open safari for example or just disappears at intermittent intervals....i have my iphone 4s connected to the same wifi network with no such problems.
    I have tried resetting the network settings to no avail
    Does anyone have any suggestions?
    Many thanks in advanced. 

    I have had my ipad retina for two and a half weeks but since the week end every time i connect to the wifi network it joins then disapears as soon as i open safari for example or just disappears at intermittent intervals....i have my iphone 4s connected to the same wifi network with no such problems.
    I have tried resetting the network settings to no avail
    Does anyone have any suggestions?
    Many thanks in advanced. 

  • After updating my wife's iPad to iOS6 the ipad will not connect to wifi on certain wireless routers. What can we do? Also, same for iPad mini with same router. But iPhone that has iOS5 has no problem connecting.

    Need help. Before updating to latest software iOS6 the iPad had no issues connecting on our home router. After updating the iPad will not work. We have a mini iPad with same issue. But I have a iPhone 4S that I chose not to update to iOS6, still has iOS5. It connects no problem to router. Our computers have no issues connecting to router either. There is a software issue with iOS6.0.1 that will not allow certain routers to communicate. What can I do?  Also, the mini iPad stated a newer version of software is out, version 6.0.2 which is supposed to correct the wifi problems. It has helped but still haven't connectivity issues. However, the iPad states software is up-to-date so we cannot update to 6.0.2 even through connecting to computer on iTunes. How can that be?

    Try going to settings, reset , reset network settings.

  • I have a IPhone 5 and Iphone 5s. Both are set up with the same account ID and running IOS 8.0.2. When the phones are connected to the same Wifi at home, both phones will ring when someone call in to one of the phone.  Anyway to solve this problem?

    I have a IPhone 5 and Iphone 5s, each phone is activited with a different service provider. Both are set up with the same account ID and running IOS 8.0.2. When the phones are connected to the same Wifi at home, both phones will ring when someone call in to one of the phone.  Hence you do not know exactly which line the caller called.  If you answered using the wrong phone, then anyone calling the other number will not get through.  Anyway to solve this problem?

    Hey David Koh TP,
    Thanks for the question. It sounds like your devices are set up to use continuity together. Specifically, it sounds like you are signed into the same Apple ID in FaceTime, and have iPhone Cellular Calls enabled. To resolve your issue, simply disable this setting:
    Connect your iPhone, iPad, and iPod touch using Continuity
    http://support.apple.com/kb/HT6337
    Turn off iPhone cellular calls
    To turn off iPhone Cellular Calls on a device, go to Settings > FaceTime and turn off iPhone Cellular Calls.
    Thanks,
    Matt M.

  • TS1424 Tried to use my apple id to update some apps and got"Connection Manager::invoke:: Failed to find service connection url"  After this occured a few times I reset the id password, and this was confirmed by email.  It still fails with same message.  I

    Tried to use my apple id to update some apps and got"Connection Manager::invoke:: Failed to find service connection url"  After this occured a few times I reset the id password, and this was confirmed by email.  It still fails with same message.  Ideas?

    Hi, you have to logout from your iTunes account and reconnect it:
    Settings / iTunes & App Stores / ...
    https://mobilfunkexperten.de/news/13450/sporadische-probleme-im-itunes-und-app-s tore
    Hope this helps... :-)

  • HT5706 I just purchased an AppleTV and am trying to connect AirPlay with my mac (2012 model) In 'system preferences displays' an airplay menu is listed but it says 'no device detected'. My AppleTV and macbook are connected to the same network. Any help?

    I just purchased an AppleTV and am trying to connect AirPlay with my mac (2012 model) In 'system preferences > displays' an airplay menu is listed but it says 'no device detected'. My AppleTV and macbook are connected to the same network. Any suggestions why it is not working?

    Troubleshoot the network as that is likely what is causing the issue.
    Also, temporarily disable the firewall on the Mac and disable IPV6 on the computer.

  • Proxy Authorization with COS connection limits Issue

    Any one having issues with connection limits (nsSizeLimit, nsTimeLimit, etc) be applied on connections that come from the proxy server with the proxy authorization control?
    Example:
    nsSizeLimit is set on user A to 2000, via a COS Pointer definition. If user A connects directly to the directory the nsSizeLimit of 2000 is used. If user A connects through the proxy, and the proxy connection to the directory is through a proxy authorization connection via ID admin1, the limit is not applied and the system default limit 1000 is applied.
    If I over-ride the COS value for nsSizeLimit and say its 3000. If I use the proxy connection in this case the limit of 3000 is used. So it only fails for COS settings.
    All the ACI's are being correctly applied via the proxy connection just not the connection limits. So basically I can't get the limits to work when I have a COS value being used via the proxy authorization user.
    Any ideas on how I can get around this. I want to avoid having to enter in the different limits into entries. Also using the limits in the proxy would create to many connection handlers.
    Thanks for any help you can give.
    Cory

    Hi,
    I don't think that connection limits (Time, Size and Throughput) for User A can apply to operations that are using the Proxy Authorization for that user. Proxy Authz is a delegation of Authorization for the ACI, and does not apply to Connection specific limits.
    Regards,
    Ludovic.

  • Create a Connection on TREX for 2 systems with same SID

    Hello world,
    Here is my case,
    We have a PRO systems With SID=PRO On Host= production , and a Sandbox system with also SID=PRO On Host=SANDBOX
    now i need to create a connection in TREX in parallel so when i add the 2nd one it just edits the 1st one that i have already made
    So is it possible to create 2 connection of same SID but diffrent Hosts In parallel?
    If Yes how ?
    Thanks In Advance...
    Ahmed Salam

    Hi Ahmed,
    it could be possible from the TREX perspective , however such configuration isn't supported . The reason for this is that the SAP applications create indexes using the ABAP system ID and client as a part of the index names (f.e. esh:e10002~e10002~acc_sid~sid). As it's not possible to create an index with the same name 2nd time, you will not be able to use the TREX instance with two systems with same SID.
    Best regards,
    Mikhail

  • Access Connections - Many APs with same SSID (Again)

    I have a W520 running Access Connections 6.11 (release December 2013) on Windows 7 Pro 64-bit.  Access Connections is still broken in regards to dealing with multiple Access Ponts having the same SSID.  It keeps hoping from one access point to another regardless of signal strength of the AP.  
    The most desirable strategy would be if Access Connections would find and lock on to the best signal strength AP and stay there.  However, it doesn't do that.  It acts almost randomly.  It also keep shifting around.  The rate is almost random as well.  Sometimes it will stay locked on to an AP for up to 10 minutes, at other times it shifts in as little as 30 seconds.
    Other laptops, from other manufacturers like HP, Toshiba, and Apple do NOT exhibit this behavior on our campus.  Other Lenovo machines running Access Connections DO exhibit this behavior.  The problem is NOT machine specific (ie, not hardware or some weird idiosyncracy of the particular W520 i'm posting about).  The problem is Lenovo's Access Connections.  The problem is also not a configuration issue with the campus.  I have a network at home running Airport Extremes all having the same SSID's and the W520 in question does exactly the same behavior there.  Totally different hardware at home vs campus and same behavior.  I cannot change the names of the AP as a fix.  This is not a capability in the configuration of the AP's.  Even if it were, I shouldn't have to do it.  Campuses are often configured in this way.  Campuses that are large commercial users who I believe are the most lucrative Lenovo customers.
    This problem has been going on for literally years with different versions of Access Connections.  Here are two threads in the Lenovo Community I found in under 30 seconds.  Neither was solved correctly.  In other words, Lenovo never fixed the software, and people had to either give up or resort to kludge solutions in their campus configurations.  
    http://forums.lenovo.com/t5/ThinkVantage-Technologies/Is-it-possible-to-default-to-a-specific-Access...
    http://forums.lenovo.com/t5/ThinkVantage-Technologies/Access-Connections-Many-APs-with-same-SSID/m-p...
    Lenovo has actually made the problem progressively worse over time instead of fixing it.  They have done this by removing the abilty to prioritize AP's by MAC address.  Initially, Lenovo allowed you to configure 5 MAC addresses in order.  Then, Lenovo removed that capability making it possible to only give a single MAC address as preferred.  Finally, in recent iterations, Lenovo removed that capability alltogether.  The box is still there in the UI, but it's greyed out.  It is very frustrating to have this kind of thing happen.  The prioritize capability is fundamentally a kludge, but at least it's something to give a bit of a workaround.  Now we don't even have that.
    Can a lenovo engineer please look at this issue and give me a timeline for resolution?
    BTW, It is still not possible to configure Access Connections with a blank SSID either.  I bring this up, because if you're going to fix the Access Connections code for multiple SSID's, you should be aware of the blank SSID problem as well.  I imagine they are both in the same part of the Access Connections codebase, at least from a logical standpoint.
    Thank you.

    I found that there is a setting in the Intel driver (15.9.1.2, released 8/22/2013) for the wireless card (Centrino Advanced-N 6205).  The setting adjusts the "roaming aggressiveness".  I can only guess this means how often the driver goes out and tries to find a "better" signal and/or bandwidth.  The card supports a/b/g so the calculus is complex as to what constitutes "better", and I have no idea how sophisticated the algorithm the driver uses is.
    That said, if I set the "aggressiveness" to the most aggressive setting, things work somewhat better.  They are still not as a good as other wifi managers bundled with competing products (specifically HP, Toshiba, and Apple so far), but it helps.  It does appear that more of the time now, the AP having the best signal appears to be the AP the laptop is attached to.
    Lenovo, please consider that forcing your customers to dig around in arcane driver settings and relying on the whims of driver writers and hardware companies to do things correctly and well, is a recipe for failure.  Your customers are just going to get annoyed and say to their colleagues, "My old Toshiba seemed to do a better job of WiFi connections. I think next time, I'm going to have IT get me one of those again."   And, of course, that colleague will look a lot harder at buying the Toshiba instead of the Lenovo, as well.  Wifi connectivity is a very big deal for people who have to move around - and lets not forget, this is a laptop we're talking about, which is explicitly designed to, well, be moved around.
    I apologize for being so pedantic, but it often takes such measures to get managers in these companies who control programmer time, to take these issues seriously and allocate the programmer resources to fix these problems.
    The problem I am having is still not considered "fixed."  I would very much like to hear any other solutions that work better.  I would love to hear from Lenovo on the matter.  Still waiting.
    Thanks.

  • Architecture Limitations with Replication of VM connected with Physical Mode RDM

    what are Architecture Limitations with Replication of VM connected with Physical Mode RDM in vsphere replication. Why VMware is not supporting this?

    vSphere Replication does not work with physical mode RDMs. This is because of the way that vSphere Replication and physical mode RDMs work.
    As outlined in this: VMware KB: Difference between Physical compatibility RDMs and Virtual compatibility RDMs
    It isn't currently possible for VR to do what it needs to do with physical mode RDMs.
    Does this answer your question?

  • I am unable to connect to the Web with Firefox, the firefox site displays on screen, yet I can connect on the same desktop computer to Internet explorer and Opera, what is preventing me from opening the firefox browser

    I am unable to connect to the web on my desktop with Firefox 8, the program displays but will not connect to the Internet, Other browsers Internet Explorer and Opera do connect on the same machine. McAfee is not blocking it, virus checks detect no virus yet yesterday it worked perfectly

    I tried what was suggested by starting in Safe Mode but the problem still exists. I am frustrated as I cannot connect to my Verizon Fios page. I can connect to the Internet with the Firefox Browser and can go to any web site except finding my Verizon Home page.

  • Problems with multiple connections in the same transaction

    Hi all !
              I'm have two questions regarding the way weblogic handles multiple
              connections.
              1) first, I don't understand why weblogic always create a new Managed
              Connection when I'm asking for 2 connection handles on the same connection
              factory and with the same connectionRequestInfo. Isn't it supposed to share
              connections ?
              For instance, the following snippet of code results in the creation of 2
              managed connections:
              ConnHandle conn1 = myCF.getConnection(myRequInfo);
              ConnHandle conn2 = myCF.getConnection(myRequInfo);
              The class corresponding to myRequInfo does implement the equals and hash
              method, so that weblogic's connection manager could use them to check that
              the queried connections are the same, and thus could share a single
              ManagedConnection between multiple connection handles. Apparantly it does
              not do that...
              2) OK, I just let weblogic create the 2 managed connections, but... My use
              of the connections is as part of a transaction. Here is what happens:
              ConnHandle conn1 = myCF.getConnection(myRequInfo);
              // a new managedConn1 is instanciated. the following happens (just a
              description)
              // xar1 = managedConn1.getXAResource()
              // xar1.start(NOFLAGS)
              // I use the conn1 handle
              conn1.close();
              //xar1.end(SUSPEND)
              ConnHandle conn2 = myCF.getConnection(myRequiInfo);
              // a new managed connection managedConn2 is instanciated.
              // xar2 = managedConn2.getXAResource();
              // xar2.start(RESUME)
              // I use conn2 handle
              conn2.close();
              // xar2.end(SUSPEND);
              // my bean returns from the remote invocation
              // the client of the bean asks to commit (using UerTransaction.commit on the
              client side)
              // xar2.end(SUCCESS)
              // xar2.commit(onePhase=true);
              // managedConn2.cleanup();
              And that's all. So, as one can see, managedConn1.cleanup was never called.
              When looking in the weblogic console, I can see that I have one connection
              with 0 handle and one with 1 handle, deemed as still being in a transaction.
              So, the conenction manager apparantly loses a managed connection during the
              transaction. And it's very very bad because after a couple of transactions,
              I'm running out of managed connections (I had set a limit of 10).
              Any one has seen such a weird behavior ? Is this a problem on my side, or
              weblogic's ? Thanks for your help.
              Sylvain
              

              I ran another test. This time I have a bean that makes use of a connector
              once per method invocation. The bean method invoked is "sayHello" and it
              gets a connection to the EIS, perform an operation on it and release it. The
              connector I developed uses XA transactions.
              My test client just calls 3 times myBean.sayHello().
              I can distinguish two cases:
              1) first, the client doesn't do transaction demarcation. In this case, since
              the sayHello method is marked as requiring transaction, the folowing happens
              in the bean:
              // **** first invocation of the bean
              connHandle = myCF.getConnection();
              // managedConn1 is instanciated
              // xar1 = managedConn1.getXAResource()
              // xar1.start(NOFLAGS);
              // managedConn1.getConnection gives a connection handle
              connHandle.doSomeWork();
              connHandle.close()
              // xar1.end(SUCCESS);
              // the bean returns from its invocation
              // xar1.commit(onePhase=true)
              // managedConn1.cleanup()
              // **** second invocation of the bean
              connHandle = myCF.getConnection();
              // managedConnectionFactory.matchManagedConnection is called. It returns the
              managed connection (managedConn1) that is in the passed set
              // xar1 = managedConn1.getXAResource()
              // xar1.start(NOFLAGS);
              // managedConn1.getConnection gives a connection handle
              connHandle.doSomeWork();
              connHandle.close
              // xar1.end(SUCCESS);
              // the bean returns from its invocation
              // xar1.commit(onePhase=true)
              // managedConn1.cleanup()
              // **** third invocation of the bean
              connHandle = myCF.getConnection();
              // managedConnectionFactory.matchManagedConnection is called. It returns the
              managed connection (managedConn1) that is in the passed set
              // xar1 = managedConn1.getXAResource()
              // xar1.start(NOFLAGS);
              // managedConn1.getConnection gives a connection handle
              connHandle.doSomeWork();
              connHandle.close
              // xar1.end(SUCCESS);
              // the bean returns from its invocation
              // xar1.commit(onePhase=true)
              // managedConn1.cleanup()
              2) second case : the client performs transaction demarcation. In that case,
              the connection manager instanciates 3 managed connections, calls start/end
              on each XAResource corresponding to each managed connection, calls commit
              once, but also calls cleanup only once, leaving 2 lost managed connections
              The client looks like this:
              UserTransaction utx = context.lookup("javax/transaction/UserTransaction");
              utx.begin();
              MyBean myBean = ctx.lookup(".......");
              myBean.sayHello();
              myBean.sayHello();
              myBean.sayHello();
              utx.commit();
              on the server the following happens:
              // **** first invocation of the bean
              connHandle = myCF.getConnection();
              // managedConn1 is instanciated
              // xar1 = managedConn1.getXAResource()
              // xar1.start(NOFLAGS);
              // managedConn1.getConnection gives a connection handle
              connHandle.doSomeWork();
              connHandle.close()
              // xar1.end(SUSPEND);
              // the bean returns from its invocation
              // **** second invocation of the bean
              connHandle = myCF.getConnection();
              // managedConn2 is instanciated
              // xar2 = managedConn2.getXAResource()
              // xar1.isSameRM(xar2) is called. returns true
              // xar2.start(RESUME);
              // managedConn2.getConnection gives a connection handle
              connHandle.doSomeWork();
              connHandle.close()
              // xar2.end(SUSPEND);
              // the bean returns from its invocation
              // **** third invocation of the bean
              connHandle = myCF.getConnection();
              // managedConn3 is instanciated
              // xar3 = managedConn3.getXAResource()
              // xar2.isSameRM(xar3) is called. returns true
              // xar3.start(RESUME);
              // managedConn3.getConnection gives a connection handle
              connHandle.doSomeWork();
              connHandle.close()
              // xar3.end(SUSPEND);
              // the bean returns from its invocation
              // the client invokes commit on the UserTransaction
              // xar3.end(SUCCESS);
              // xar3.commit(onephase = true);
              // managedConn3.cleanup();
              And so, managedConn1 and managedConn2 got lost in the way...
              What's more puzzling, it's that when monitoring my connector with the
              console, I can see that there are 3 connections. 2 declared as still having
              one handle used and being in transaction, and one not in transaction and
              with 0 active handle. BUT when monitoring the JTA part of the server, I can
              see that there has been 1 transaction that committed, and no connection is
              "in flight" as the console says. So, on one side the console says 2 managed
              connections are still part of a transaction while on the other it says that
              no transactions are currently in flight.
              Thanks for any kind of help on this very bizarre behavior.
              Sylvain
              

  • Cannot connect to Net, have done for last 12 months no problem, I have other apple products that are connecting to the same hub happily. The hub is seen and the signal is strong, it just doesn't connect. I have reset the network settings with no joy.

    cannot connect to Net, have done for last 12 months no problem, I have other apple products that are connecting to the same hub happily. The hub is seen and the signal is strong, it just doesn't connect. I have reset the network settings with no joy. Any help much appreciated?

    Try restarting your WiFi router by removing power to it for 30 seconds.

Maybe you are looking for

  • Mini DVI to HDMI problems with 46" Samsung TV

    I bought a cable with mini DVI to HDMI at the Apple store. My new TV works great with a PC laptop, but my MBA (13") doesn't seem to be sending all the info to the TV. I get some windows, but not all of the window. I think I'm dead in the water here.

  • HT5429 map does not show only the pins with no street view or labels

    The map details on my map appliction has disappeared. When I search for a location the pin shows up with no street view detail just a  yellow background screen

  • SQL: which is better IN or OR

    Hi, I have a query which is in the format: select * from ( select col1, col2, col3 from tab1, tab2, tab3 where tab1.col1='aa' AND tab2.col2='BBB' ... AND (tab1.col1='AA' OR tab1.col='BB' OR tab1.col='CC'... OR tab1.col='NN') ORDER BY tab1.col3 DESC )

  • Keyboard/mouse focus mixup on dual screens

    I've been using a dual screen i3wm setup for a few years now, with the dual screen configuration being done by xrandr in a script in .bash_profile: xrandr --output HDMI1 --auto --right-of HDMI2 sleep 4; xrandr --output HDMI2 --auto --left-of HDMI1 Re

  • Banding in the Layer Mask?

    Hello, I have: Windows Xp Service Pack 3 4GB RAM Geforce 560ti PS CS5 extended I am a photographer and submit the images to an agency.They inspect images at 100% for technical quality. While preparing an image today, I used a layer mask in the levels